1-9they can only use commands at their own, or lower, levels. All the commands are categorized into fourlevels, which are visit, monitor, system, and manage from low to high, and identified respectively by 0through 3. Table 1-3 describes the levels of the commands.Table 1-3 Default command levelsLevel Privilege Description0 VisitInvolves commands for network diagnosis and commandsfor accessing an external device. Commands at this levelare not allowed to be saved after being configured. Afterthe device is restarted, the commands at this level will berestored to the default settings. Commands at this levelinclude ping, tracert, telnet and ssh2.1 MonitorIncludes commands for system maintenance and servicefault diagnosis. Commands at this level are not allowed tobe saved after being configured. After the device isrestarted, the commands at this level will be restored tothe default settings. Commands at this level includedebugging, terminal, refresh, reset, and send.2 SystemProvides service configuration commands, includingrouting and commands at each level of the network forproviding services. By default, commands at this levelinclude all configuration commands except for those atmanage level.3 ManageInfluences the basic operation of the system and thesystem support modules for service support. By default,commands at this level involve file system, FTP, TFTP,Xmodem command download, user management, levelsetting, as well as parameter setting within a system (thelast case involves those non-protocol or non RFCprovisioned commands).Configuring user privilege levelUser privilege level can be configured by using AAA authentication parameters or under a userinterface.Configure user privilege level by using AAA authentication parametersIf the user interface authentication mode is scheme when a user logs in, and username and passwordare needed at login, then the user privilege level is specified in the configuration of AAA authentication.Follow these steps to configure user privilege level by using AAA authentication parameters:To do… Use the command… RemarksEnter system view system-view —Enter user interface viewuser-interface { first-num1[ last-num1 ] | { aux | vty }first-num2 [ last-num2 ] }—Configure the authenticationmode for logging in to the userinterface as schemeauthentication-mode schemeRequiredBy default, the authenticationmode for VTY users ispassword, and noauthentication is needed forAUX login users.
